{"id":4963,"date":"2019-09-06T13:36:41","date_gmt":"2019-09-06T13:36:41","guid":{"rendered":"https:\/\/merikebi.warrenmyers.com\/?p=4963"},"modified":"2019-09-06T13:36:41","modified_gmt":"2019-09-06T13:36:41","slug":"new-comment-on-reddit-72","status":"publish","type":"post","link":"https:\/\/merikebi.warrenmyers.com\/?p=4963","title":{"rendered":"New comment on reddit"},"content":{"rendered":"
\n
\n

that way theres not really any pattern to it , but its mostly so i can easily remember it<\/p>\n<\/blockquote>\n

No – you are not as clever as you think you are. People are very bad at creating "random<\/a>" things – and generally break down into patterns: precisely<\/em> what you described you do.<\/p>\n

The most important thing about passwords is entropy. There are ~6 bits of entropy per character in the list of upper and lower case letters plus numbers (62 possible choices per position).<\/p>\n

No – 8-11 characters are not enough<\/p>\n

With 11 truly random<\/a><\/em> characters, you have a maximum of just under 66 bits of entropy<\/a>. 2^62<\/code> is not a big number of passwords to check – especially since, on average, you only need to check half of them (2^61<\/code>).<\/p>\n

NIST says<\/a> real-world entropy of human-generated passwords is much much<\/em> much<\/strong> lower:<\/p>\n